Lucene search
+L

261295 matches found

OSV
OSV
added 2026/09/08 7:15 p.m.6 views

CVE-2026-86806 opengeos GeoLibre _is_within_roots server-side request forgery

A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function iswithinroots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...

6.9CVSS5.4AI score
SaveExploits0References11
OSV
OSV
added 2026/09/08 6:39 p.m.4 views

CLSA-2026-1788892753 TuxCare security update for 4 packages (1 CVE)

TuxCare rebuilt 4 packages to address 1 CVE. Fixed in 0.26.1-tuxcare.3...

5.1CVSS5.8AI score0.00323EPSS
SaveExploits0
OSV
OSV
added 2026/09/08 6:20 p.m.12 views

CVE-2026-81379

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/09/08 6:20 p.m.17 views

CVE-2026-81376

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

9.6CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:20 p.m.7 views

CVE-2026-81353

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

7.8CVSS0.00346EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 6:20 p.m.10 views

CVE-2026-81377

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to perform tampering over a network...

6.5CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:20 p.m.5 views

CVE-2026-81352

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

8.8CVSS0.0049EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 6:20 p.m.21 views

CVE-2026-78462

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:19 p.m.11 views

CVE-2026-69775

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

7.5CVSS0.00522EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 6:19 p.m.17 views

UBUNTU-CVE-2026-69522

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

8.8CVSS6.2AI score0.00805EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/08 6:18 p.m.17 views

CVE-2026-69276

Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...

9.8CVSS0.00929EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:17 p.m.6 views

CVE-2026-58600

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

7.8CVSS0.0033EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:17 p.m.7 views

CVE-2026-58599

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

7.8CVSS0.00325EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/08 6:13 p.m.9 views

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

5.8AI score0.00798EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/09/08 5:18 p.m.5 views

EUVD-2026-73849

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.00346EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:18 p.m.7 views

EUVD-2026-73848

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.0049EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:18 p.m.33 views

CVE-2026-81353

A heap-based buffer overflow in the HEIF Image Extensions component of the Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally . The vulnerability scores CVSS 7.8 (High) with a local attack vector, low complexity, no required privileges, but user interaction i...

7.8CVSS6.2AI score0.00346EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/09/08 5:18 p.m.88 views

CVE-2026-81352

CVE-2026-81352 is a heap-based buffer overflow in the Microsoft Windows Codecs Library , specifically within Web Media Extensions , that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H...

8.8CVSS6.3AI score0.0049EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 5:18 p.m.10 views

UBUNTU-CVE-2026-82061

A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...

8.1CVSS6.1AI score0.00292EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/08 5:18 p.m.10 views

UBUNTU-CVE-2026-82063

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during curso...

6CVSS6AI score0.00258EPSS
SaveExploits0References2
Rows per page
Query Builder